Information Security Manager

22 Apr 2024
20 May 2024
Employer Sector
Technology, IT & Telecoms
Contract Type
Full Time

About the role

We're on a mission to make affordable loans available to more people. We have built award–winning technology to look beyond credit scores and offer fair credit to people ignored by traditional lenders.

We have two parts of our business. On the consumer side, we have Abound. Abound has helped us prove that our approach works at scale. While other lenders only look at your credit score, we look at all of the full picture – what you earn, how you spend, and what's left at the end. We're able to do this thanks to Open Banking.

On the B2B side, we have Render. Render is the platform that allows Abound to make better lending decisions. By better we mean less risky. And less risky decisions mean we can offer customers better rates than they can usually find elsewhere. We're taking Render global so that more companies can offer affordable credit to their customers.

Who you are

  • 5+ years professional experience as a security analyst

  • Strong understanding of security principles, threat intelligence, and risk management.

  • Experience implementing ISO27001 / SOC2 and conducting associated compliance assessments

  • Experience performing security assessments on cloud–based production services and endpoint devices

  • Verify the security of third–party vendors and collaborate with them to meet security requirements

Ideally, you'll also have

  • Proficiency in ethical hacking, intrusion prevention, and incident response.

  • Experience setting up private bug–bounty programs

  • Experience using or deploying a CSPM tool

  • Familiarity using or deploying EDR, SIEM, SOAR platforms for endpoint devices

What you'll be doing

  • Support the implementation of policies and controls to attain and maintain security certifications

  • Support both internal and external 3rd party security assessments

  • Set up processes to monitor and provide continual improvement of the security posture of the organization

  • Facilitate regular pen–tests

  • Own internal security training programs

  • Collaborate with compliance, IT and development teams to implement security best practice and policy controls

What we offer

  • Everyone owns a piece of the company – equity

  • 25 days' holiday a year, plus 8 bank holidays

  • 2 paid volunteering days per year

  • One month paid sabbatical after 4 years

  • Free gym membership

  • Save up to 60% on an electric vehicle through our salary sacrifice scheme with Loveelectric

  • Team wellness budget to be active together – set up a yoga class, a tennis lesson or go bouldering